CVE-2025-52558CWE-79

ChangeDetection.io XSS in watch overview

High · published June 23, 2025

CVSS v4.0
7.0
EPSS
1%
Percentile
47.8
In the wild
Unconfirmed
What it is

changedetection.io is a free open source web page change detection, website watcher, restock monitor and notification service. Prior to version 0.50.4, errors in filters from website page change detection watches were not being filtered resulting in a cross-site scripting (XSS) vulnerability. This issue has been patched in version 0.50.4

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00594 · 47.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-06-23T20:52Z
EPSS history
Timeline
  • 23 JUN 20:52Z
    ChangeDetection.io XSS in watch overview
    cvelistv5